InterSystems IRIS (Remote) extension

[andre_vdveen]

Hello,

Is anyone using the IRIS extenion with 'Verify SSL certificate' option enabled?
We imported the internal root CA and host's certs into the ActiveGate keystore, but keep getting the error:

SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed: unable to get local issuer certificate

Any suggestions on what else to check, would be great!

[JamesKitson · Accepted solution]

Extensions do not make use of that trust store, they have to be explicitly written to use a custom store if it is needed. The IRIS extension will only use the default trusted CAs typical Python will include, and the 'disable' verification option turns that off.

If you have a need to use a custom store and can't just disable verification for internal systems you can create an Idea/RFE and it will be reviewed for a possible future update.